Vulnerabilities > Expresstech > Quiz AND Survey Master > 7.3.4

DATE CVE VULNERABILITY TITLE RISK
2022-01-17 CVE-2022-0180 Cross-Site Request Forgery (CSRF) vulnerability in Expresstech Quiz and Survey Master
Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page.
network
low complexity
expresstech CWE-352
8.8
8.8
2022-01-17 CVE-2022-0181 Cross-site Scripting vulnerability in Expresstech Quiz and Survey Master
Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via unspecified vectors.
network
low complexity
expresstech CWE-79
6.1
6.1
2022-01-17 CVE-2022-0182 Cross-site Scripting vulnerability in Expresstech Quiz and Survey Master
Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary script via an website that uses Quiz And Survey Master.
network
low complexity
expresstech CWE-79
5.4
5.4